CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- hewlett packard enterprise (hpe) hpe aruba networking fabric composerUnauthenticated Limited File Read allows Data Exposure in Web Interface7.5 High
- nvidia runxNVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful...7.8 High
- hewlett packard enterprise (hpe) hpe aruba networking fabric composerInsecure File Handling allows Remote Code Execution in Backup Functionality7.2 High
- tp-link systems inc. tapo c220 v1, tp-link tapo c220 firmware, tapo c520ws firmware +1 more +3 moreUnauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS7.1 High
- tp link systems inc. tapo c210 v3, tp-link tapo c220 firmware, tapo c520ws firmware +2 more +4 moreUnauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS7.1 High
- tp-link systems inc. tapo c100 v5, tp-link tapo c220 firmware, tapo c520ws firmware +2 more +4 moreNull Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS7.1 High
- mongodb mongo-c-driverInteger Overflow in GridFS chunkSize Leading to Heap Allocation Failure7.1 High
- acronis cloud managerLocal privilege escalation due to insecure folder permissions. The following products are...6.7 Medium
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
- quatuor evaluacion de desempeno, evaluación de desempeño (edd) +1 moreOut-of-band SQL injection in Quatuor Performance Evaluation9.3 Critical
kernel-firmwareSUSERecommended update for kernel-firmwareNo score- xenx86: incomplete IBPB for vCPU isolation2.9 Low
- xenx86: buffer overrun with shadow paging + tracing8.8 High
- kyvernoKyverno Denial of Service via Context Variable Amplification in Policy Engine7.7 High
- kyvernoKyverno Cross-Namespace Privilege Escalation via Policy apiCall10.0 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the Layout: Scrolling and Overflow component8.8 High
- mozilla firefoxMitigation bypass in the Privacy: Anti-Tracking component6.5 Medium
- yoyofr modizerInteger overflow in modizer7.8 High
- themrdemonized xray-monolithType confusion in xray-monolith9.1 Critical
- rinnegatamante lpp-vitaOut-of-bounds read in lpp-vita7.8 High
- neutrinolabs xrdp, debian linux +1 morexrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow9.1 Critical
- projectskyfire skyfire 548Pointer arithmetic error in SkyFire_5489.8 Critical
- pilgrimage233 minecraft-rcon-manageCode injection in Minecraft-Rcon-Manage10.0 Critical
- ixray-team ixray-1.6-stcop, ix-ray engine 1.6 +1 moreInformation disclosure in ixray-1.6-stcop3.7 Low
- ixray-team ixray-1.6-stcop, ix-ray engine 1.6 +1 moreOut-of-bounds write in ixray-1.6-stcop9.8 Critical
- ixray-team ixray-1.6-stcop, ix-ray engine 1.6 +1 moreInfinite loop (DoS) in ixray-1.6-stcop7.5 High
- eclipse threadxThe vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_…7.8 High
- eclipse threadx usbx, eclipse foundation threadx - usbx +1 moreThe function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi…4.2 Medium
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…8.7 High
- testa online test management systemTesta Online Test Management System 3.4.7 - 'q' SQL Injection8.8 High
- maurosoria dirsearchdirsearch 0.4.1 - CSV Injection5.1 Medium
- gila cms cmsGila CMS < 2.0.0 - Remote Code Execution9.3 Critical
- geraked phpscript-sghPhpscript-sgh 0.1.0 - Time Based Blind SQL Injection8.8 High
- laravel holdings inc. novaLaravel Nova 3.7.0 - 'range' DoS8.7 High
- raimersoft tapinradioTapinRadio 2.13.7 - Denial of Service6.7 Medium
- vestacpVestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation8.7 High
- librenmsLibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection7.1 High
- flexense syncbreezeSyncBreeze 10.0.28 - 'login' Denial of Service8.7 High
- victor cms project cms, victoralagwu cmssite +1 moreVictor CMS 1.0 - File Upload To RCE8.7 High
- guelfoweb knock, knockpy +1 moreKnockpy 4.1.1 - CSV Injection5.3 Medium
- Show moreLoading…